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* SUBJECT: | APEX Industrial Security Manual 


1. The purpose of this. memorandun is to bring jto--your -- 
attention the current status’ of the APEX Industrial! Security + 
Manual being developed by the Community Security Group, DCI « 
Security Committee, and to highlight serious concerns the’ 
Agency has with respect to the Manual. [__] Bh ae ie 25 

\ ae. 

2. In the way of background, you will recall that in uf 
the aftermath of the Boyce/Lee espionage case, several as 
studies were conducted of the Agency's Industrial Security 
Program. One by-product of those reviews was the formation 
of the Industrial Security Branch which was directed ‘to 
prepare a series of industrial security manuals governing 
collateral as well as compartmented classified contracting 
activities within industry. These manuals were to: elimi- 
nate the lack of uniformity, loose ané imprecise standardyg 
and procedures existing in the current manuals; improve tie 
physical security standards for the protection of classified 
materials, whether collateral or compartmented; and incorpo-— 
rate approximately 20 additional general security requirements 
pertaining to document control, tighter personnel supervision, 
and other security enhancements as directed by the DCL and © 
the Director of Security. 


3. In response to the above direction, "Standard 
Security Procedures for Contractors" (SSPC) was developed and 
specifically designed to supersede the "iihite and Green 
Books" currently in use by the Office cf Logistics for 
collateral classified contracting activi * Phe SSPC was 
painstakingly prepared, widely coordinated within the Agency 

f seauently avproved. 
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It is now being readied for publication and dissemination. 

Particular care was taken to incorporate into the SSPC 

precise and clear-cut security procedures, improved security 

Standards for the protection of classified material — higher 

in most respects tnan those currently in Foree for the . +. « 
- protection of compartmented materials - and to introduce: - 


“those general security requirements: of particular concern to.’ 


the DCI and the Director.of Security. [7 Joos Peo Be Se DR | 

ou... 4. Once the SSPC was approved, the next step was.to | 

'- develop a similar manual governing compartmented information. 
and which would be as uniform as possible with the SSPC which _ 
dealt exclusively with the collateral world. It was antici- ae 
pated that the compartmented manual, once approved within the 
Agency, would be coordinated .within the Community fore 
application Community-wide. As it. turned out, however, 
responsibility to prepare the compartmented version was . * 
diverted from the Industrial Security Branch and assigned to * 
the Community Security Group, DCI Security Committee, under } 
the latter's charge to prepare authoritative guidelines for 
the protection of compartmented information within Government * - 
and industry. The so-called APEX System is to be a Single a 
control system designed to replace the three current control 
systems under which sensitive compartmented information is 
currently being protected. [| 3 


2- A draft APEX Industrial Security Manual was recently 
circulated within the Agency for review and comment. Conspic— _- 
uous among reviewer responses was that the manual lacked 
Specificity, was vague, and absent the 20 or so security”™ 
requirements mandated by the DCI and the Director of Security. 
Further, it was noted that the manual lacked procedural 
detail, could not stand alone and would beg the issuance 
of a host of implementing directives — probably in conflict 
with one another - from a multitude of Governrient agencies 
engaged in compartmented contractual activities. This would 
make procedural uniformity incredibly difficult if not 
impossible. 


6. As is apparent, the concerns expressed about the 
APEX draft transcend syntax and grammar. The core of 
the problem is the general and imprecise nature of the 
APEX Industrial Security fianual and thet the absence of 
specificity will preducea a lack of 2Pornmity. In-other 
words, if approved the ArvWSk Industriel cecurity Manual 
essentiaily wisi brim, us back to where we started. 
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7- If the current draft of the APEX Industrial Security 
Manual is approved as- written — as appears to be the case - 
then the Agency may want to consider preparing its own manual 
governing SCI, modeling it after the SSPC. - Uniformity would 
then be achieved at least within the Agency Industrial e 
Security arena. Such a course of action would seen permis— 
| “sible in view of the following provisions set forth ‘in the 
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oe - ."Phis Manual is not..-intended to intrude ‘on: 
-.-.the authority of Senior Intelligence Officers . | 

| (SIO's) of the Intelligence: Community who will .- ae 
-". eontinue to prescribe basic direction, classifica—.. is 
tion guidance and policy on dissemination for |. . 
programs under their cognizance.... To fulfill. . 2. _. 
their responsibilities, ‘Government officials fey eso 
provide additional implementing guidance to contrac- v 
tors under their cognizance as necessary as long as. +) 
Such guidance is coordinated with the DCI Security °° 
Committee." = 
ie 
It is noted, too, that consideration of the above option was a 
discussed in general terms with the Chairman, APEX Manual : 
Working Group, who imposed no objection. [|__| a 
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